Suppresion schema enhancements

Hi,

I have several CVEs reported for Microsoft.SqlServer.Types.dll (from NuGet) that do not apply to the version that I use (latest, 14.x.x). So I've added them to the suppresion file.

What I would like to add to the suppresion file is:

- reason why the CVE is suppressed (not applying to SQL Server 2014 in my case)

- min. version of the assembly for which suppression applies (for example, a CVE could affect SQL Server 2014, but not SQL Server 2014 SP1 - so one version of Microsoft.SqlServer.Types.dll could be safe, while an earlier one not).

Thank you,
Simo